IBM Support

PK87356; 7.0.0.3: AccessException in Security Domain

Download


Abstract

AccessException is caught when Federated User Registries is used in Security Domain

Download Description

PK87356 resolves the following problem:

ERROR DESCRIPTION:
Federated User Registries with LDAP User Registry is used in a Security Domain which scope is a node level, get method in:

com.ibm.websphere.wim.ServiceProvider

throws following exception:

[5/21/09 15:15:48:562 EDT] 00000048 exception E
com.ibm.websphere.wim.security.authz.AccessException
CWWIM2008E The principal
'user:defaultWIMFileBasedRealm/uid=test,o=defaultWIMFileBasedRe
alm' is not authorized to perform the operation
'GET PersonAccount' on 'uid=testadmin,dc=ibm,dc=com'

LOCAL FIX:
n/a

PROBLEM SUMMARY

USERS AFFECTED:

All users of IBM WebSphere Application Server

PROBLEM DESCRIPTION:
AccessException is caught when Federated User Registries is used in Security Domain

RECOMMENDATION:
None

Due to a code defect in WebSphere Application Server security, Federated User Registries cannot recognize whether some specific security object is properly constructed under Security Domain context. As a result, some methods of Federated User Registries are not functioning properly.

PROBLEM CONCLUSION:
With this fix, the method in WebSphere Application Server security returns proper information to Federated User Registries.

The fix for this APAR is currently targeted for inclusion in fix pack 7.0.0.7. Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Prerequisites

Please download the UpdateInstaller below to install this fix.

[{"PRLabel":"UpdateInstaller","PRLang":"US English","PRSize":"7250000","PRPlat":{"label":"AIX","code":"PF002"},"PRURL":"http://www.ibm.com/support/docview.wss?rs=180&uid=swg21205991"}]

Installation Instructions

Please review the readme.txt for detailed installation instructions.

[{"INLabel":"Readme","INLang":"US English","INSize":"6622","INURL":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PK87356/readme.txt"}]
On
[{"DNLabel":"7.0.0.3-WS-WAS-IFPK87356","DNDate":"6/15/2009","DNLang":"US English","DNSize":"71506","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http://www.ibm.com/support/fixcentral/quickorder?fixids=7.0.0.3-WS-WAS-IFPK87356&product=ibm%2FWebSphere%2FWebSphere%20Application%20Server&source=dbluesearch","DNURL_FTP":"ftp://public.dhe.ibm.com/software/websphere/appserv/support/fixes/PK87356/7.0.0.3-WS-WAS-IFPK87356.pak","DDURL":"http://public.dhe.ibm.com:7618;sw_websphere;appserv/support/fixes/PK87356/7.0.0.3-WS-WAS-IFPK87356.pak"}]

Technical Support

Contact IBM Support using SR (http://www-306.ibm.com/software/support/probsub.html), visit the WebSphere Application Server Support Web site (http://www.ibm.com/software/webservers/appserv/was/support/), or contact 1-800-IBM-SERV (U.S. only).

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Security","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"7.0.0.3","Edition":"Base;Express;Network Deployment","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
15 June 2018

UID

swg24023471